Topic
614 articles
Threat IntelCVE-2026-22058 in StorageGRID (formerly StorageGRID Webscale) versio (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2022-29966 in Emerson Ovation has several protocols that have no (Missing Authentication) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-114549 in NoMachine nxwebrunner Heap-based Buffer Overflow R (Heap Buffer Overflow) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-92188 in Quest Foglight for Databases ForgeMBeanServerSuppo (Missing Authentication) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-92190 in Quest Foglight for Databases baseRmiServiceExporte (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-92189 in Quest Foglight for Databases writeTopologySectionT (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
MicrosoftCVE-2026-112917 in In Docker Desktop for Windows with the WSL2 backen (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch
Threat IntelCVE-2026-95732 in An authentication bypass vulnerability exists in t (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-95731 in Hardcoded password vulnerabilities in the command- (Missing Authentication) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-115731 in Deserialization of untrusted data in the report-pr (Code Injection) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-115732 in Incorrect authorization in the certificate-name ma (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-82158 in Dell Wyse Management Suite, versions (Cross-Site Scripting) allows remote attackers to trigger arbitrary code execution. Patch: Version 2
Threat IntelCVE-2026-13594 in Zoho Corporation's ManageEngine Log360 and EventLo (Access Control) allows remote attackers to trigger arbitrary code execution. Patch: V
Threat IntelCVE-2026-89292 in In Eclipse Mnestix Browser versions (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Vendor s
Threat IntelCVE-2026-120518 in The BuddyPress XProfile Image Field plugin for Wor (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-120534 in The Advanced Custom Fields (Unrestricted File Upload) allows remote attackers to trigger arbitrary code execution. Patch: Vendor securit
Threat IntelCVE-2026-4052 in This issue only impacts deployments where WSO2 Ide (Missing Authorization) allows remote attackers to trigger arbitrary code execution. Pa
Threat IntelCVE-2026-121022 in AxxonSoft Use of Default Password (CWE-1393) in the web clie (Security Vulnerability) allows remote attackers to trigger arbitrary code
Threat IntelCVE-2026-116606 in Barracuda An authentication bypass in Barracuda Email Securi (Authentication Bypass) allows remote attackers to trigger arbitrary code e
Threat IntelCVE-2026-77876 in Control Web Panel (CWP) (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch
Threat IntelCVE-2026-119085 in Improper neutralization of special elements used i (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
CMS SecurityCVE-2026-86596 in The s2Member plugin for WordPress is vulnerable to (Code Injection) allows remote attackers to trigger arbitrary code execution. Patch: V
CMS SecurityCVE-2026-105603 in DJ-Classifieds Joomla Extension - dj-extensions (Unrestricted File Upload) allows remote attackers to trigger arbitrary code execution.
CMS SecurityCVE-2026-105604 in DJ-Classifieds Joomla Extension - dj-extensions (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: Vend